EUVD-2026-126020

Netcccyun dnsmgr 2.18 before 2.22 contains a missing authorization vulnerability in POST /cloudflare/getdomaindefaultline that allows restricted users to access domains outside their permissions. Restricted sub-users or single-domain logins can iterate the domainid parameter to enumerate panel...

CVE-2026-129468

Netcccyun dnsmgr versions 2.18 through 2.21 are susceptible to a missing authorization vulnerability within the POST /cloudflare/get_domain_default_line endpoint. This flaw allows restricted sub-users or single-domain logins to iterate the domain_id parameter, enabling them to enumerate panel dom...

CVE-2026-98005

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

CVE-2026-98005 erofs: delimit inode_share cache key components

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

CVE-2024-48623

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

CVE-2024-48623: Improper Neutralization of Input During Web Page Generation

In queue\index.php of DomainMOD below v4.12.0, the listid and domainid parameters in the GET request can be exploited to cause a reflected Cross Site Scripting XSS...

Mail.ru: Пользователь может просматривать, удалять и изменять данные любой компании перебирая domain_id [biz.mail.ru]

An IDOR vulnerability in biz.mail.ru allowed to partially manipulate billing data tax id, addresses of arbitrary company...